Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263/efdc3ac8-cafe-3dec-8426-7c8a1eecbda5.roa
File:                     efdc3ac8-cafe-3dec-8426-7c8a1eecbda5.roa (raw, json)
Hash identifier:          dKHuGpY7R7A8BO4RijF118prM7RRqixjb2toeNHmGEU=
Subject key identifier:   FE:7A:58:6C:72:D1:97:8A:E8:F9:F4:11:41:2A:46:ED:8A:D7:DF:F7
Certificate issuer:       /CN=eb2c27ca-fb7c-4cad-9f9b-4f754f864263
Certificate serial:       010D0C9F4328584EA790A7267208028625F28600
Authority key identifier: CF:B9:5A:A2:3C:1B:20:FF:10:CA:74:8F:25:5C:F5:09:89:A2:BE:51
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263/efdc3ac8-cafe-3dec-8426-7c8a1eecbda5.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     396908
IP address blocks:        2602:f956:80::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263/eb2c27ca-fb7c-4cad-9f9b-4f754f864263.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263/eb2c27ca-fb7c-4cad-9f9b-4f754f864263.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:90:a7:26:72:08:02:86:25:f2:86:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb2c27ca-fb7c-4cad-9f9b-4f754f864263
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=df5311b6-0bc2-44a1-b5f3-df109e3c2451
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:84:81:29:aa:b2:4a:50:ee:eb:ca:0a:d2:12:
                    c0:a9:52:93:a6:ae:12:51:4b:e0:0f:ba:d2:fc:76:
                    84:26:a2:a1:ea:0c:a3:2e:3d:b5:a4:87:54:a9:4e:
                    a5:d6:c1:e2:58:c6:13:ff:00:18:2d:12:57:97:0f:
                    a0:00:0e:87:18:7f:46:06:bc:93:34:7b:05:70:33:
                    43:a2:e1:4d:aa:b1:06:1c:fc:96:74:4a:d4:61:6e:
                    34:9f:53:bc:6f:b1:44:ff:44:40:a0:e4:b6:c6:75:
                    cc:3c:ff:17:bd:18:8f:88:7e:75:51:f5:70:4d:81:
                    5d:98:de:ce:d1:ba:d8:b4:7a:16:98:50:00:e5:f9:
                    b7:e2:60:a4:33:56:9b:3b:22:b8:98:f2:7f:63:ba:
                    2b:8a:60:c5:14:69:64:b4:9c:3a:44:15:43:f1:1a:
                    aa:97:8f:ce:d9:cf:48:20:57:12:a6:23:33:a6:de:
                    35:77:31:01:65:6a:4a:3d:35:59:9b:21:ed:76:7e:
                    57:ad:88:aa:b6:e5:25:3d:da:95:0c:d1:2a:d9:e6:
                    e4:fd:87:d2:da:42:bd:7d:04:fa:c3:a0:9f:67:f7:
                    71:ef:ec:6f:25:c1:79:04:61:c8:64:5c:a0:8f:6a:
                    b7:0a:1c:fc:60:0e:f2:22:6b:3c:3e:a3:3b:78:ff:
                    72:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:7A:58:6C:72:D1:97:8A:E8:F9:F4:11:41:2A:46:ED:8A:D7:DF:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263/efdc3ac8-cafe-3dec-8426-7c8a1eecbda5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263/eb2c27ca-fb7c-4cad-9f9b-4f754f864263.crl

            X509v3 Authority Key Identifier:
                keyid:CF:B9:5A:A2:3C:1B:20:FF:10:CA:74:8F:25:5C:F5:09:89:A2:BE:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f956:80::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:d3:33:00:9b:a7:13:cc:20:d0:0d:d4:61:db:28:ca:dc:d8:
         f2:2d:fd:26:d5:1a:d9:c0:1a:d4:1b:3f:8d:62:7e:1d:0d:c2:
         a5:8d:28:f9:7b:f1:88:7f:a9:b0:4b:b9:ea:ca:e3:88:d0:92:
         7c:be:2a:c1:ca:c6:27:ef:35:a7:08:fe:38:a8:9a:fc:c8:00:
         a0:a0:6b:aa:a1:07:bd:fd:8f:7d:06:45:da:75:f0:b6:01:a5:
         e5:f9:b3:b5:21:2f:fd:e0:a3:b5:e6:80:cb:85:01:10:4a:f3:
         b5:c8:3f:8c:58:60:fc:43:30:f1:1c:78:b2:88:ed:15:fe:5b:
         ce:28:53:b9:36:94:02:21:6b:4e:b8:4b:cf:86:77:9f:74:be:
         40:90:23:6b:e3:42:4a:d6:36:34:64:6b:0a:fe:3c:8c:51:20:
         5d:bf:0d:05:13:82:74:5d:e6:29:15:f8:09:6c:12:69:4e:fb:
         4d:cc:7f:37:13:37:49:5e:52:71:ab:56:e1:b0:86:29:18:59:
         16:c7:48:ae:a6:09:be:1c:fd:23:98:4e:62:a2:dd:f5:ae:85:
         fe:60:c9:ae:9a:a4:5b:72:4a:08:01:dd:60:f9:82:e9:b2:fd:
         20:11:e4:38:cf:57:39:05:39:ce:80:3c:e6:f7:d4:99:ab:58:
         d0:23:53:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 02:02:22 2026 by rpki-client